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The goal in function property testing is to determine whether a black-box Boolean function has a 
certain property or is e-far from having that property. The performance of the algorithm is judged by 
how many calls need to be made to the black box in order to determine, with high probability, which 
of the two alternatives is the case. Here we present two quantum algorithms, the first to determine 
whether the function is linear and the second to determine whether it is symmetric (invariant under 
permutations of the arguments). Both require 0{e^^^''^) calls to the oracle, which is better than 
known classical algorithms. In addition, in the case of linearity testing, if the function is linear, the 
quantum algorithm identifies which linear function it is. The linearity test combines the Bernstein- 
Vazirani algorithm and amplitude amplification, while the test to determine whether a function is 
symmetric uses projective measurements and amplitude amplification. 



PACS numbers: 03.67.Ac 



I. INTRODUCTION 



One of the first quantum algorithms to be discovered 
was the Bernstein- Vazirani algorithm This algo- 

rithm allows one to identify an unknown linear Boolean 
function with only one call to the oracle, or black box, 
that evaluates that function. Classically, if the inputs 
to the function are n-bit strings, n calls would be re- 
quired. A subsequent quantum algorithm, the Grover 
algorithm, also identifies an unknown Boolean function 
[31 ■ In this case, the set of functions being considered 
are those whose inputs are n-bit strings and whose out- 
puts are on all of the strings except one. The Grover 
algorithm can find to which Boolean function the ora- 
cle corresponds (or which string gives the output 1) with 
0(2"/2) calls to the oracle rather than the 0(2") that 
would be required classically. Here we would like to con- 
sider two additional quantum algorithms that apply to 
Boolean functions. Both make use of a generalization of 
the Grover algorithm known as amplitude amplification 
Q and one also makes use of the Berstein- Vazirani al- 
gorithm. Both determine whether an unknown Boolean 
function has a particular property or is far from having 
that property. Problems of this type fall into the area of 
function property testing. The first algorithm presented 
here will test whether a function is linear, and the second 
will test whether it is symmetric. Both perform better 
than existing classical algorithms. 

Now let us discuss what our algorithms do in somewhat 
more detail. Function property testing is an area of com- 
puter science that finds algorithms to determine whether 
a black-box Boolean function has a certain property or is 
far from having that property. A Boolean function is one 
whose inputs are n-bit strings, X1X2 ■ ■ ■ Xm and whose 
output is either or 1. One of the properties one can 
test for is linearity; a Boolean function is linear if it can 
be expressed as 



f{xi,X2, . ..Xn) = aiXi + 02X2 -I- . . . GnXn 



(1) 



where Uj is either or 1, and all operations are modulo 2. 
We can express the above equation as f{x) — a-x, where 
X and a are n-bit strings, and the dot product of two 
strings is defined as above. An equivalent definition of 
linearity is that a Boolean function is linear if it satisfies 
f{x + y) = fix) + f{y), where x and y are n-bit strings, 
and x-\-y \s the n-bit string whose j**^ element is Xj + yj . 
There is a classical test for linearity, known as the BLR 
test, and what we wish to do is to develop a quantum test 
that requires fewer calls to the oracle. A second property 
we shall test for is whether a function is symmetric. A 
Boolean function is symmetric if it is invariant under all 
permutations of its arguments. 

Quantum property testing was first considered by 
Buhrman, et al. Q- They found situations for which 
there are quantum algorithms that are better than any 
classical algorithm, in terms of number of calls to the or- 
acle, and is some cases exponentially better. Atici and 
Serviedo discuss a quantum algorithm for testing whether 
a Boolean function is a fc-junta [sl]. A Boolean function 
is a fc-junta if it depends on only k of the n variables. 
More recently, Montanaro and Osborne defined quantum 
Boolean functions and developed several property test- 
ing algorithms for them Q. The Boolean functions we 
consider in this paper will be strictly classical. Finally, 
Ambainis, Childs and Liu have developed algorithms for 
testing the properties of graphs 0- 

We will begin by discussing some of the basic ideas 
of functions testing and then go on to present the clas- 
sical BLR algorithm for linearity testing. Because our 
algorithm is a combination of two existing quantum algo- 
rithms, the Bernstein- Vazirani algorithm and the Grover 
algorithm, we will review some features of both of these. 
We will then present our quantum algorithm for linear- 
ity testing. Next we shall discuss the classical algorithm 
for testing whether a Boolean function is symmetric, and 
then go on to present a quantum algorithm that does so 
with fewer oracle calls. 
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II. FUNCTION TESTING AND THE BLR TEST 

As was mentioned in the Introduction, a Boolean func- 
tion maps n-bit strings to {0, 1}. We say that two 
Boolean functions, / and g, are e-close if they agree on 
a (1 — e) fraction of their inputs. If they are not e-close, 
then they are e-far. We say that a function, /, is e-close 
to having a particular property, if there is a function, g, 
that has that property that is e-close to /. If there is no 
such function, then / is said to be e-far from having that 
property. For a discussion of these definitions, as well as 
a very readable discussion of function testing in general, 
see g. 

In the quantum case, it is also useful to think of 
Boolean functions as vectors in a Hilbert space. The 
space is just H = Hf", the space of n qubits, where 
7^2 is the two-dimensional single-qubit space. For the 
Boolean function f{x), define the vector 

1 

7n 



\vf) 



(2) 



where \x) is a state in the computational basis, and N — 
2". This vector is generated in a very natural way by the 
quantum oracle, Uf that evaluates f{x). The operation 
Uf is called an /-controUed-NOT gate, and it acts as 



Uf\x)\b) = \x)\b + f{x)), 



(3) 



where \b) is a single-qubit state, with b ~ 0, 1, and the 
addition is modulo 2. liUf is applied to the state ), 
where |-) = (|0) - |l))/v^, the result is 
so that iff// is applied to l^;)]— ), the result is, ). 
If two functions / and g are e-close, then {vf\vg) > 1 — 2e. 

The vectors corresponding to linear Boolean functions 
form an orthonormal set, and they span "H, so they con- 
stitute an orthonormal basis. The orthonormality follows 
from the relation 



(4) 



xe{o,i}^ 



where x and y are n-bit strings. Because these vectors 
are orthonormal, they are perfectly distinguishable, and 
this is, in fact, the basis of the Bernstein- Vazirani algo- 
rithm The problem that algorithm solves is the fol- 
lowing. One is given a black box that evaluates some lin- 
ear Boolean function, and the task is to determine which 
Boolean function it evaluates. The Bernstein- Vazirani 
algorithm accomplishes this with one query to the black 
box. The fact that the black boxes corresponding to dif- 
ferent linear Boolean functions can be used to produce or- 
thogonal vectors implies that with a single measurement 
we can perfectly determine which function we have. 

This is actually accomplished by using a circuit con- 
sisting of Hadamard gates and an /-controUed-NOT gate. 
If we apply n Hadamard gates, one to each qubit, in the 
state \x), we obtain 



H 



^ 7N i-V 'l 



(5) 



where, as before, we have set N = 2"-. Now, the input 
state to our circuit is the (n -I- 1) qubit state 



|*.„.)-^|00...0)(|0)-|1)). 



(6) 



We first apply n Hadamard gates, one to each of the first 
n qubits, and then the /-controlled-NOT gate, giving us 




E (-lK(^'k)(|0)-|l)). (7) 



e{o,i}" 



At this point, since f{x) is linear, let us set it equal 
to f{x) — a ■ x, where now the object has become to 
determine the n-bit string a. Next, we again apply n 
Hadamard gates to the first n qubits yielding 



N\P2 ^ ^ 
^ xe{oa}" ye{o,i}" 



(_l)-(a+.)|y)(|0)_|l)). 

(8) 

Discarding the last qubit (it is not entangled with the 
others), and taking note of Eq. Q, we see that we are 
left with the output state |a), which we can just mea- 
sure in the computational basis to find the n-bit string a. 
Therefore, we find out what the function is with only one 
application of the /-controlled-NOT gate. Classically, we 
would need to evaluate the function n times to find a. 

Now let us look at a classical test for deciding whether 
a Boolean function is linear of e-far from being linear, 
the BLR (Blum, Luby, Rubinfcld) test d i). A single 
instance of the BLR goes as follows: 

• Pick two n-bit strings x and y independently and 
uniformly at random from {0, 1}". 



Set z = 



y- 



Query / on x, y, and z. 
Accept if/(z) = /(x) + /(y). 



It can be shown that if / passes the BLR test with a 
probability of at least 1 — e, then it is e-close to being 
linear This test has the following properties: 

• If a function is linear, the probability the test ac- 
cepts is one. 

• If a function is e-far from linear, the probability the 
test accepts is less than 1 — e. 

In order to decide whether a function is linear, we run 
the test 0(l/e) times and overall accept if each individual 
test accepts. Note that the probability that a function 
that is e-far from linear will be accepted on each of m 
runs, prn, is 



Pm < (1 - eY 



_ gmlii(l- 



< e" 



(9) 



ye{o,i}" 



so by choosing m = 0(e~^) we can make the probability 
of accepting a function that is indeed e-far from linear 
quite small. For example, if we would like to make this 
probability less than 1/3, we can choose m > (ln3)/e. 
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III. QUANTUM ALGORITHM 

We will now describe a quantum algorithm to deter- 
mine whether a function is linear or e-far from linear. If 
the function is linear it will definitely give "yes." If it is 
not, it will, with probability greater than 2/3 say "no." 
It requires 0(e~^/'^) oracle calls, and has the additional 
property that if the function is linear, it tells you which 
linear function it is. One first runs Bernstein- Vazirani on 
the function 0(e~^/^) times. If one gets the same result 
every time (the same linear function) one then proceeds 
to the next step. Next, we make use of the candidate 
linear function to construct a Grover-like algorithm that 
amplifies the nonlinear part, if there is one, of the func- 
tion we are testing. This algorithm is then run 
times, each time for 0(e~^/^) steps. After each run of 
the Grover algorithm, the system is measured to see if it 
is still in the state corresponding to the candidate linear 
function. If the function passes all of these tests, it is 
declared to be linear. 

A linear function will be declared to be linear by this 
test. Now let us see what happens if the function is e-far 
from being linear. Suppose we have a function / that is 
e-far from being linear. This means that if g is linear, 
then {vf\vg) < 1 — 2e. Now let us consider the first part 
of the test. Let a = {vf\vg) < 1 — 2e, where g is linear. 
Then we can write 



\vf) =a\vg) + \v^), 



where {vg\Vg) = and 



,.-L||2 



(l-a2)V2>2^(l-e)i/2. 



(10) 



(11) 



We will split our analysis into two parts, a < 1 — e^/^ and 
1 — e^/^ < a < 1 - 2e. First consider a < 1 - e^/^ = oq. 
Suppose we run Berstein- Vazirani m times and get g each 
time. The probability of this happening, Pg{m), is 



Pgim) < \ao 



1 2m 



g2mln(l-6=/3) <- 



-2me 



2/3 



(12) 



for e < 1. Therefore, for m = 0(e ^/^), we can make 
this probability small, in particular, it will be less than 
1/3 if m > ln3/(2e2/3). 

Now we will consider the case 1 - e2/3 < a < 1 - 2e, 
and this is where amplitude amplification comes in. We 
now assume we have performed the Bernstein- Vazirani 
part of the algorithm and gotten the linear function g 
each time. Define the operator 



M={l-2\Vf){VfmVg){Vg\-I), 



(13) 



and note that it can be realized with two applications 

or the oracle (the oracle is used to generate the vectors 
\vf)). The operator M acts in the two-dimensional space 
spanned by \vg) and \v^). Defining \vg) = {l/\\Vg\\)\v^), 
we can express M in the basis {vg, Vg} as 



M = 



1 - 2a2 2a(l - a^^^ 
-2a(l - a2)V2 1 _ 



(14) 



The eigenvalues and eigenvectors are 

X = l-2a^ + 2ia{l - a'')^^ \r]i) = ^ ( J 



X = l-2a^ - 2ia(l - o^)^/^ 
Defining 



l.2) = ^(ij(.15) 



e« = l_2a2 + 2ia(l-a2)V2, 



(16) 



which implies that cos 6 = 1 — 2a^ and sin 6 = 2a(l 
a^)^/^, we find that 



(17) 



After the n applications of M we measure the projection 
Pg = \vg){vg\. Thc probablHty that we obtain 0, which 
indicates that the function is not linear, is 

q{a,n) = [— asinn^ -|- (1 — a^)^/^ cosn^]^ 

= ^ + ^ [(1 - 2a^) cos(2n6i) - 2a(l - a^)^/^ sin(2n6')] 
= ^{l + cos[{2n + l)0]}. (18) 

If e is small, 9 will be close to, but less than, tt, and so 
we can express it as 6 = w — 66, where 66 is small and 
positive. This gives us for q{a, n) 



q{a, n) = -{1 - cos[(2n + 1)66]}. 



(19) 



Making use of the bound on a, Uq < a < 1 — 2e, which 
implies that 1 — > 1 — > 4e(l — e), we have that 

(l-2e)(l-a^)i/2 > a(l-a2)^/2 > 2V^{l-ey^^ao. (20) 

The quantity in the middle of the above inequality is 

just sin9 = sm{S9). Using the fact that ior < 9 < tt/2, 
if ki > sm9 > k2, then {n/2)ki > 9 > k2, and assuming 
that e < 1/8, we find that v^e^s > 66 > e^^. We are 
now going to run Grover for n steps, where 



{2n + l)V2e^/^ =n, 



(21) 



so that n = 0{e~^^'^). Now if S9 is at the top of its 
allowed range, this will result in q{a,n) = 1, and when 
we do our measurement we will find that the function 
was not linear. Now we have to see what happens if 69 
is at the bottom of its allowed range. In that case, with 
the same n as above, we have, since (2n -|- 1)66 is small 
(this requires e^/^ -C 1), 

qia, n) ^ ^[{2n + 1)66]^ = ^eV3 = 0(eV3). (22) 

This probability is small, but if we repeat this procedure, 
run Grover for n steps and measure, r times, the proba- 
bility that we never get when we measure Pg is 



1 - !^eV3 



< e 



(23) 
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which can be made small if we choose r = 0{e~^^^). In 
particular, if r > 81n3/(7r^e^/^), then the probability of 
never getting when we measure Pg is less than 1/3. 

Summarizing, we found that if / is e-far from linear, 
and a < ao we will find that it is not linear with a 
probability of order one by running Bernstein- Vazirani 
(3(g-2/3^ times. In the case that ao < a < 1 — 2e, as- 
suming we get the same linear function every time we 
run Bernstein- Vazirani, then by running 

GroverO(e-i/3) 

steps 0(e~^/^) times, for a total of 0{e~^^^) function 
calls, we will with a probability or order one detect the 
fact that it is not linear. In both cases the total number 
of function calls is 0{e~^^^). 



and \vf±) = {I—Ps)\vf). We next define the vector \um), 
for m — 0,1, . . .n, which is the superposition, with equal 
coefficients, of all vectors in the computational basis with 
m ones, e.g. 

\uo) = I00...0) 

\ui) = ^(|100...0) + |010...0) + ... 



I00...01)). 



We than have that 



m=0 



(24) 



(25) 



IV. TESTING PERMUTATION INVARIANCE 

We now want to present a variant of the algorithm 
in the previous section that can test whether a Boolean 
function is invariant under permutations of its argu- 
ments, or is e-far from having this property. As was noted 
in the Introduction, a function that is invariant under all 
permutations of its arguments is called symmetric. An- 
other way of phrasing this is that we are testing whether 
a function depends only on the Hamming weight of its ar- 
guments or is e-far from having this property. The Ham- 
ming weight of the sequence x = xiX2 ■ ■ - Xn is just the 
number of ones in the sequence, so that if f{xi,X2, ■ ■ - Xn) 
depends only on the Hamming weight of its arguments, 
its value is determined only by how many of the Xj, for 
1 < j < are equal to one. 

There is a classical algorithm to test whether a Boolean 
function is symmetric or e-far from being symmetric [lo| . 
The procedure is to randomly choose an n-bit input, x, 
that is not either all zeroes or all ones and evaluate f{x). 
One then chooses an input y ^ x that has the same Ham- 
ming weight as x. Next, one checks and sees whether 
f{x) — f{y), and, if so, outputs "yes," otherwise one 
outputs "no." This procedure is repeated 0(e~^) times, 
and if one obtains "yes" every time, the function is de- 
clared to be symmetric. If a "no" is obtained at any step 
the function is declared to be not symmetric. A sym- 
metric function will always be accepted as symmetric by 
this algorithm, and a function that is e-far from being 
symmetric will be rejected with high probability. 

Now let us go to our quantum algorithm. Here the 
procedure is different than in the classical case. We note 
that if a Boolean function is symmetric, then the corre- 
sponding vector, \vf) must lie in the completely symmet- 
ric subspace of H. Let us call this subspace S and the 
projection operator onto it Ps- Therefore, we would like 
to test whether a function in invariant under permuta- 
tions of its arguments by testing whether the correspond- 
ing vector \vf) is in S. 

In order to do this, we need to determine how large a 
component orthogonal to S the vector \vf) will have if / is 
e-far from being symmetric. We begin by expressing the 
vector \vf) as \vf) = \vfs) + \vf±), where \vfs) = Ps\vf), 



Now suppose that for the sequences with Hamming 
weight m, f{x) — 1 for Z,„ of them and f{x) — for 
the remaining sequences. This implies that 



{Um\Vf) = 



1 



N 





-1/2 












(my 




\('") 






\ m J 



(26) 



so that 

\\vfs 



'^{vf\Ps\vf) 



/-^ N 

m=0 



2L 



(27) 

Next, it is relatively simple to construct the symmetric 
function that is closest to /, which we shall call g. If x 
has Hamming weight m, we set g(x) = if 



and g{x) = 1 otherwise. This implies that 



N ^ 

m=0 



2L 



(28) 



(29) 



and, since / is e-far from being symmetric, we have that 
{v-f\vg) < 1 — 2e. Therefore, making use of the fact that 





-1 
















) 











we have that 



m=0 





-1 








/ n ^ 












) 


[( 













< 1, 



< 1 - 2e. 



(30) 



(31) 



This gives us that ||w/5|P < 1 — 2e so that > 
2e. Therefore, if / is e-far from being symmetric, \vf) 
has a component of norm greater than or equal to ^/2e 
orthogonal to S. 

Our algorithm now proceeds much as before. We first 
measure Pg m times. If the result of any of our measure- 
ments is 0, we reject, and say that / is not symmetric. 
We will again break up our analysis into two parts. Let 
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1^ = W^fsW and /ig = 1 — e^/'^, then wc will consider the 
two cases, n < no and /^o < < (1 — 2e)^/^. The sec- 
ond case will give us a nonzero range for /x if e < 1/8, 
which we will assume to be the case. Now, if /i < /xq, 
the probability that / passes this part of the test is Pm, 
where 



< ImoI'™ = (1 - e'/')"" < e- 



2m€ 



2/3 



(32) 



If we choose m > ln3/(2e-^/'^), then this probability will 
be less than 1/3. This part of the algorithm requires 
(3(g-2/3^ oracle calls. 

Now let us look at the case when /Uq < M < (1 — 
2e)^/^. If the function has passed the first part of the 
test, we proceed to the second part, which makes use of 
the Grover algorithm. The Grover operator in this case 
is 



G={I-2\vf){vf\){I-2Ps), 



(33) 



and it requires two applications of the oracle to imple- 
ment. We want to analyze what happens when we apply 
this operator to \vf), and in order to do so we define the 
unit vectors 



l«2) 



1 



\\vfs\\ 

1 

¥JI\\ 



\vfs) 

\Vf±)- 



(34) 



The operator G maps the two-dimensional space spanned 
by and \u2) into itself, and in the |w2)} basis, 

it can be represented as the 2x2 matrix 



G 



2/^2-1 
-2^(1 - /i^)^/^ 



2m(1-m')1/2 
2/^2 -1 



where we have set /x = | 
values of this matrix are 



(35) 

VfsW < (1 - 2e)i/2. The eigen- 

(36) 



X± = 2i?-1± 2in{l - /U^)^/^ 
with the corresponding eigenvalues given by 

'^^^ = 71 ( ±^ 

We can now calculate G'"\vf). Setting 

cose* = 2/^2 -1 sin6' = 2/i(l-/i2)i/2^ 



(37) 



(38) 



which implies that for e ^ 1 that we also have < ^ ^ 1, 
we find that 

= [fj,cosne+{l- iJ.'^y/'^smne]\ui) 

+ [-fj,sbine +{1- iJ,'^y/'^cosne]\u2).i39) 

If we now measure Ps in this state, the probability that 
we obtain one, q{n,^), is given by 



cos 



(40) 



We now need to get an estimate of 6. Noting that for 
(1/^2) < At < 1, which will be true if e^/^ < i _ 2"!/^ 
the function 2;u(l — /i^)^/^ is monotonically decreasing. 
In this case, we have that 

2\/2(l - e^/^)e^/^ > sin6l > 2(1 - 2e)^/^\/2i. (41) 

This implies, using the same inequality as in the last 
section, that 

7r\/2(l - e2/3)ei/3 > ^ > 2^(1 _ 26^/^^, (42) 



which, for e < 1/8, can be simplified to 
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1/3 > 



(43) 



Next, we apply G n times where we now choose n = 
37r/(10e^/^) and measure Ps- We repeat this procedure 
I times, where I = Oie''^/^). If is near the top of 
its range, the probability that we will obtain when wc 
measure Ps is of order one, so that our function will be 
shown not to be symmetric with high probability after a 
small number of runs. Now let us sec what happens if 
is at the bottom of its range. In that case, n6 <^ 1, so 
that 



g(n,/u) 



1 - 



(271-1)6* 



1 - 



7tt 

To' 



1/6 



(44) 



Now the probability that we will get 1 each time we mea- 
sure Ps is 



To' 



1/6 



< exp 



-4/ei/3 



• (45) 



Therefore, if wc choose / > In 3/(4e^/'^), this probability 
can be made less than 1/3. The total number of oracle 
calls in the second part of the algorithm, that is, the 
part using the Grover algorithm, is 0(6"^/^), so that the 
entire algorithm uses 0{e^^/'^) oracle calls to determine 
whether a function is symmetric, or whether it is e-far 
from symmetric with a probability of error of less than 
1/3. 



V. CONCLUSION 

We have presented two algorithms for function prop- 
erty testing. The first tells you whether a function is 
linear or e-far from linear, and if it is linear it tells you 
which linear function it is. The second tells you whether 
a function is symmetric or e-far from being symmetric. 

It will be interesting to see whether quantum algo- 
rithms can be found that test for other properties of 
Boolean functions. The Bernstein- Vazirani algorithm 
and amplitude amplification give us a powerful tools, 
which are not available in the classical case. It remains 
to be seen exactly how useful they can be. 
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The goal in function property testing is to determine whether a black-box Boolean function has a 
certain property or is e-far from having that property. The performance of the algorithm is judged by 
how many calls need to be made to the black box in order to determine, with high probability, which 
of the two alternatives is the case. Here we present two quantum algorithms, the first to determine 
whether the function is linear and the second to determine whether it is symmetric (invariant under 
permutations of the arguments). Both require order e~^^''^ calls to the oracle, which is better than 
known classical algorithms. In addition, in the case of linearity testing, if the function is linear, the 
quantum algorithm identifies which linear function it is. The linearity test combines the Bernstein- 
Vazirani algorithm and amplitude amplification, while the test to determine whether a function is 
symmetric uses projective measurements and amplitude amplification. 



PACS numbers: 03.67.Ac 



I. INTRODUCTION 



One of the first quantum algorithms to be discovered 
was the Bernstein- Vazirani algorithm [l[ . This algorithm 
allovifs one to identify an unknown linear Boolean func- 
tion with only one call to the oracle, or black box, that 
evaluates that function. Classically, if the inputs to the 
function are n-bit strings, n calls would be required. A 
subsequent quantum algorithm, the Grover algorithm, 
also identifies an unknown Boolean function j2[. In the 
simplest case of its use, the set of functions being consid- 
ered consists of those functions whose inputs are n-bit 
strings and whose outputs are on all of the strings 
except one. The Grover algorithm can find to which 
Boolean function the oracle corresponds (or which string 
gives the output 1) with order 2"/^ calls to the oracle 
rather than the order 2" that would be required clas- 
sically. Here we would like to consider two additional 
quantum algorithms that apply to Boolean functions. 
Both make use of a generalization of the Grover algorithm 
known as amplitude amplification [sf and one also makes 
use of the Bernstein- Vazirani algorithm. Both determine 
whether an unknown Boolean function has a particular 
property or is far from having that property. Problems 
of this type fall into the area of function property test- 
ing. The first algorithm presented here will test whether 
a function is linear, and the second will test whether it is 
symmetric. Both perform better than existing classical 
algorithms. 

Now let us discuss what our algorithms do in somewhat 
more detail. Function property testing is an area of com- 
puter science that finds algorithms to determine whether 
a black-box Boolean function has a certain property or 
is far from having that property. A Boolean function is 
one whose inputs are n-bit strings, X1X2 ■ ■ ■ a;„, and whose 
output is either or 1. One of the properties one can test 
for is linearity; a Boolean function is linear if and only if 



it can be expressed as 

f{xi,X2, . . .x„) = aia-i + a2X2 + ■ . .a„a;„, (1) 

where Uj is either or 1, and all operations are modulo 2. 
We can express the above equation as f{x) = a-x, where 
X and a are n-bit strings, and the dot product of two 
strings is defined as above. An equivalent definition of 
linearity is that a Boolean function is linear if and only if 
it satisfies f{x + y) = f{x) + f{y), where x and y are n-bit 
strings, and x + y is the n-bit string whose j^^ element is 
Xj+yj. There is a classical test for linearity, known as the 
BLR (Blum, Luby, Rubinfeld) test and what we wish 
to do is to develop a quantum test that requires fewer 
calls to the oracle. A second property we shall test for is 
whether a function is symmetric. A Boolean function is 
symmetric if it is invariant under all permutations of its 
arguments. 

Quantum property testing was first considered by 
Buhrman et al. Q. They found situations for which 
there are quantum algorithms that are better than any 
classical algorithm, in terms of the number of calls to 
the oracle, and in some cases exponentially better. Atici 
and Scrviedo discuss a quantum algorithm for testing 
whether a Boolean function is a fc-junta 0. A Boolean 
function is a fc-junta if it depends on only k of the n 
variables. One can also devise quantum algorithms to 
identify which input variables a Boolean function de- 
pends on, and for learning the form of quadratic and 
cubic Boolean functions Rotteler Q has also dis- 
cussed quantum algorithms to identify quadratic Boolean 
functions. More recently, Montanaro and Osborne de- 
fined quantum Boolean functions and developed several 
property testing algorithms for them The Boolean 
functions we consider in this paper will be strictly clas- 
sical. Finally, Ambainis, Childs and Liu have developed 
algorithms for testing the properties of graphs [loj . 

We will begin by discussing some of the basic ideas 
of function testing and then go on to present the clas- 
sical BLR algorithm for linearity testing. Because our 
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algorithm is a combination of two existing quantum algo- 
rithms, the Bernstein- Vazirani algorithm and the Grover 
algorithm, we will review some features of both of these. 
We will then present our quantum algorithm for linear- 
ity testing. Next we shall discuss the classical algorithm 
for testing whether a Boolean function is symmetric, and 
then go on to present a quantum algorithm that does so 
with fewer oracle calls. 



II. FUNCTION TESTING AND THE BLR TEST 

As was mentioned in the Introduction, a Boolean func- 
tion maps n-bit strings to {0, 1}. We say that two 
Boolean functions, / and g, arc e-close if they agree on 
at least a (1 — e) fraction of their inputs. Another way of 
saying this is to define a distance between / and g as 



d{f,9) 



(2) 



were N = 2", which is just the fraction of strings on 
which / and g disagree. So, / and g are e-close if and 
only if d{f, g) < e. If they are not e-closc, then they arc 
e-far. Wc say that a function, /, is e-close to having a 
particular property, if there is a function, that has that 
property that is e-closc to /. If there is no such function, 
then / is said to be e-far from having that property. For a 
discussion of these definitions, as well as a very readable 
discussion of function testing in general, see . 

In the quantum case, it is also useful to think of 
Boolean functions as vectors in a Hilbert space. The 
space is just H = T^f", the space of n qubits, where 
y.2 is the two-dimensional single-qubit space. For the 
Boolean function /(a;), define the vector 



(3) 



where \x) is a state in the computational basis, and, as 
before, N = 2". This vector is generated in a very nat- 
ural way by the quantum oracle Uf that evaluates f{x). 
The operation Uf is called an /-controllcd-NOT gate, 
and it acts as 



Uf\x)\b) = \x)\b + fix)), 



(4) 



where \b) is a single-qubit state, with b = 0, 1, and the 
addition is modulo 2. If ?7/ is applied to the state ), 
where |-) = (|0) - \l))/V2, the resuh is 
so that if [// is applied to ii/VN)^^ k)!— ), the result 
is ). If two functions / and g are e-close, then 



{Vf\vg) = [l-dif,g)]-d{f,g)>1^2e. 



(5) 



The vectors corresponding to linear Boolean functions 
form an orthonormal set, and they span Ji, so they con- 
stitute an orthonormal basis. The orthonormality follows 



from the relation 
1 
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(-1) 



x-y 



Oy,0, 



(6) 



where x and y are 7i-bit strings. Because these vectors are 
orthonormal, they are perfectly distinguishable, and this 
is, in fact, the basis of the Bernstein- Vazirani algorithm 
[l| . The problem that this algorithm solves is the follow- 
ing. One is given a black box that evaluates some linear 
Boolean function, and the task is to determine which 
Boolean function it evaluates. The Bernstein- Vazirani 
algorithm accomplishes this with one query to the black 
box. The fact that the black boxes corresponding to dif- 
ferent linear Boolean functions can be used to produce or- 
thogonal vectors implies that with a single measurement 
we can perfectly determine which function we have. 

This is actually accomplished by using a circuit con- 
sisting of Hadamard gates and an /-controlled-NOT gate. 
If we apply n Hadamard gates, one to each qubit, in the 
state \x), we obtain 



1 



(7) 



ve{o,i}" 



where, as before, we have set iV = 2". Now, the input 
state to our circuit is the (n + 1) qubit state 



1 



V2 



|00...0)(|0)-|1)). 



(8) 



We first apply n Hadamard gates, one to each of the first 
71 qubits, and then the /-controlled-NOT gate, giving us 



J2 (~l)^(^)|x>(|0)-|l)). (9) 



a:G{0,l}" 



At this point, since f{x) is linear, let us set it equal 
to f{x) — a ■ x, where now the object has become to 
determine the n-bit string a. Next, we again apply n 
Hadamard gates to the first n qubits yielding 



|*out) = 



N\/2 ^ 



E (-ir'"+'^^l2/>(|0)-|l)). 



(10) 

Discarding the last qubit (it is not entangled with the 
others), and taking note of Eq. ([S]), we see that wc are 
left with the output state |a), which we can just mea- 
sure in the computational basis to find the 7i-bit string a. 
Therefore, we find out what the function is with only one 
application of the /-controlled-NOT gate. Classically, we 
would need to evaluate the function n times to find a. 
If f(x) is not linear, the output vector can be expressed 

as 



1 



E 

■ye{o,i}" 



(«/K.)|y)(|o)-|i)), (11) 



where \vy.^ is the vector corresponding to the function 
g{x) = y ■ X. In this case, if wc measure l^'out) in the 
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computational basis, the probability of obtaining the n- 
bit string z is \{vf\v,.^)\^ = \l-2d{f,z-x)\^ 0. 

In the Grover algorithm, wc successively apply what 
is known as the Grover operator to an initial state, and 
this has the effect of rotating that state into the desired 
state. In the usual case, when one wishes to find for which 
input x' the unknown function is one, i.e. f{x') = 1, 
and it holds that f{x) ~ for x x' , the initial state 

is ii/VN)J2x\^) ^^"^ tli*^ desired state is \x'). All of 
the action in the Grover algorithm takes place in the 
two-dimensional real vector space spanned by these two 
vectors. In general, if the two-dimensional real space is 
spanned by the vectors and \v2)-, the Grover operator 
will be of the form [l^ 

G=il-2\vi){vi\)il-2\vi){vi\), (12) 

where \vi) is orthogonal to \vi) and is orthogonal 
to \v2). This is a product of two reflections in the two- 
dimensional real space and \v2) can be visualized as 
two vectors in the Euclidean plane), one about the line 
containing \vi) and one about the line containing \v2)- It 
is a theorem in plane geometry that the product of two 
reflections is a rotation by twice the angle between the 
lines, in this case twice the angle between \vi) and \v2)- 
We will be using the Grover algorithm to rotate an initial 
vector in the direction of a component of the function we 
are testing that does not have the desired property, e.g. 
linearity, should such a component exist. 

Now let us look at a classical test for deciding whether 
a Boolean function is linear or e-far from being linear, 
the BLR test [3, [HI- The function is promised to be 
to belong to one of these two alternatives, that is, it is 
guaranteed to be either linear or e-far from linear. A 
single instance of the BLR procedure goes as follows: 

• Pick two n-bit strings x and y independently and 
uniformly at random from {0, 1}". 

• Set z = X + y. 

• Query / on x, y, and z. 

. Accept if /(z) = /(x) + /(y). 
This test has the following properties [ll| : 

• If a function is linear, the probability the test ac- 
cepts is one. 

• If a function is e-far from linear, the probability the 
test accepts is less than 1 — e. 

In order to decide whether a function is linear, we run 
the test of the order 1/e times and overall accept if each 
individual test accepts. Note that the probability that a 
function that is e-far from linear will be accepted on each 
of m runs, p,„, is 

< (1-e)" = e™'"(i-^) < e-™% (13) 

so by choosing m of order we can make the probabil- 
ity of accepting a function that is indeed e-far from linear 
quite small. For example, if we would like to make this 
probability less than 1/3, we can choose m > (ln3)/e. 



III. QUANTUM ALGORITHM 

We will now describe a quantum algorithm to deter- 
mine whether a function is linear or e-far from linear. 
Again, our function is promised to be either linear or e- 
far from linear. If the function is linear it will definitely 
give "yes." If it is e-far from linear, it will say "no" with 
probability greater than 2/3. It requires of the order of 
g-2/3 oracle calls, and has the additional property that 
if the function is linear, it tells us which linear function 
it is. Schematically, the algorithm is as follows. 

• First run the Bernstein- Vazirani algorithm on the 
function of the order of e^^/"^ times. If one gets the 
same result every time (the same linear function) 
one then proceeds to the next step. If not, the 
function is declared to be e-far from linear. 

• If the linear function we obtained in the first step is 
g{x), we use the /-controlled-NOT gate to generate 

the state {l/VN)J2x\^)\fi^)+9i^)) (the addition 
is modulo 2) and measure the last qubit in the com- 
putational basis. If we obtain we proceed to the 
next step, if not, the function is declared to be e-far 
from linear. 

• We make use of the candidate linear function to 
construct a Grover-like algorithm that amplifies the 
nonlinear part, if there is one, of the function we 
are testing. This algorithm is then run of the order 
of e~^/'^ times, each time for of the order of e~^/^ 
steps. After each run of the Grover algorithm, the 
system is measured to see if it is still in the state 
corresponding to the candidate linear function. If 
the function passes this test, it is declared to be 
linear, if not, it is declared to be e-far from linear. 

A linear function will be declared to be linear by this 
test. Now let us see what happens if the function is e-far 
from being linear. Suppose we have a function / that is 
e-far from being linear, and we have run the Bernstcin- 
Vazirani algorithm once and obtained the linear function 
g as our result. Because g is linear, we have {vf\vg) < 
1 — 2e. Now let us consider the rest of the first part of the 
test. Let a = {vf\vg) < 1 — 2e, where g is linear. Then 
we can write 

\vf)=a\vg} + \v^), (14) 

where {vg\v^) =0 and 

||«,^|| = (l-a^)V2>2V^(l-e)V2. (15) 

Note that when \vf) and \vg) are expanded in the com- 
putational basis, the resulting expansion coefficients are 
real. This implies that {vf\vg) and {vf\v^) arc real. We 

will split our analysis into three parts, |a| < 1 — e^/'^, 
-1 < a < -1 + e2/3, and 1 - e^/^ < a < 1 - 2e. These 
parts correspond to the three parts of our algorithm. 
First consider \a\ < 1 — e^^^ = uq. Suppose wc run 
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Bernstein- Vazirani m more times and get g each time. 
The probabihty of this happening, pg{m), is 

Pg{m) < |aoP'" - < e-^""''^ (16) 



Defining 



for e < 1. Therefore, for m of order e ^Z"^, we can make 
this probabihty small, in particular, it will be less than 
1/3 if TO > ln3/(2e2/3). 

Let us now consider the case — 1 < a < — 1 + 6^/"^. It is 
necessary to single out this case, because the Bernstein- 
Vazirani algorithm will return the same linear function 
g{x) for two different inputs, g{x) and g{x) = 1 + g{x). 



Note that {vg\vg) 



-1. So, if / passes the first step 



of the algorithm, we need to ensure that {vf\vg) is close 
to 1 and not close to —1. In order to do this, as stated 
above, we use the /-controUed-NOT gate to produce the 
state (I/Vn) |a;)|/(a;) + g{x)) and measure the last 
qubit. The probability of obtaining is 1 — d{f,g) = 
{1 + {vf\vg))/2. For -1 < a < -l + e^/^, this is less than 
(l/2)e2/3. For e < 1/8, this wiU be less than 1/3. 

Now we will consider the case 1 — e^/"^ < a < 1 — 2e, and 
this is where amplitude amplification comes in. We now 
assume that we have performed the Bernstein- Vazirani 
part of the algorithm and gotten the linear function g 
each time. Define the operator 

M=il-2\Vf){Vf\){2\Vg){Vg\-l), (17) 

and note that it can be realized with two applications 
or the oracle (the oracle is used to generate the operator 
/ — 2|'i;/)(t;/|). In more detail, we have that 

iI-2\vf){vf\)<gi\-){-\ 

= (|0)(0|)®"]i/^"(8) |-)(-|C//. (18) 

If the operation in Eq. (fT8|) is applied to a register of 
n qubits plus an auxihary qubit in the state |— ), then 
the effect is to realize the operation I — 2\vf){vf\ on the 
register. The auxiliary qubit can, as usual, be ignored 
after the operation, because it is not entangled with the 
rest of the state. It is straightforward to construct the 
operator / — 2\vg){vg\ since we know g explicitly. The 
operator M will rotate toward l^^). If = 0, 
as would be the case if / is linear, then M will simply 
have the effect of multiplying \vg) by —1. Therefore, we 
can see whether \vf) has a component orthogonal to \vg) 
by applying M a number of times and measuring to see 
whether the resulting vector is still in the same direction 
as \vg). 

The operator M acts in the two-dimensional real vec- 



tor space spanned by \vg) and 



Defining \vg) = 



(l/j|t'j"||)|u^), we can express AI in the basis {vg,Vg} as 
l-2a2 2a(l-a2)i/2 
-2a(l-a2)i/2 i_2a2 

The eigenvalues and eigenvectors are 



M 



(19) 



Ai = l-2a2 + 2w(l-a^)^/2; 
Aa = 1 - 2a2 - 2w(l - a^)^/^; 



1^71, 



V2\^ 



(20) 



e^« = l-2a2 + 2za(l-a2)i/2^ 



which implies that cos — 1 — 2a^ and sin 
a^y/^, we find that 



M-\vf) 



a cos nO + (1 — a^)^/^ sin7i6 
—a sin ?i6' + (1 — a^)^/^ cos?i 



(21) 
2a(l - 

(22) 



After the n applications of M we measure the projection 
Pg = \vg){vg\. Thc probablllty that we obtain 0, which 
indicates that the function is not linear, is 



q{a,n) 



3inn6l + (1 - a^Y''^ cosnOf 



[(1 - 2a^)cos{2r 



1 1 

- 2 + 2' 

-2a(l- 0^)1/2 sin(2n6 

= i{l + cos[(2ri + l)6l]}. 



(23) 



If e is small, will be close to, but less than, tt, and so 
we can express it as 9 = tt — 69, where 69 is small and 
positive. This gives us for g(a, n) 

q{a,n) = ^{l-cos[{2n + l)59]}. (24) 

Making use of the bound on a, gq < a < I — 2e, which 
implies that 1 — Oq > 1 — a2 > 4e(l — e), we have that 

2(1 - 2e)(l - a2)i/2 > 2a{l - a^fl^ > 4V~e{l - ef'^a^. 

Let us now do a rough calculation to give the basic idea 
of this part of the algorithm. A more detailed calculation 
will follow. Now, the quantity in the middle of the above 
inequality is just sin0 = sin((50). For e sufficiently small, 
we see that, using sin (56' ~ 59, 



2\f2(yl^ >59> 4^/i. 



(26) 



We now choose n so that {2n + l)2y/2€^/^ = tt. This 
guarantees that if 59 is at the top of its range, we will have 
g(n, a) = 1, and we will find after one measurement of Pg 
that the function is not linear. Note that in this case, this 
part of the algorithm makes of order e~i/3 function calls. 
Now, for this value of n, the worst case is if 59 is at the 
bottom of its range. We then have that {2n + \)59 ^ (^1^ . 
Assuming e is sufficiently small so that (2n-|-l)50 is much 
less than one, we have that q(a, n) ~ (l/4)[(2n -I- 1)(56']2, 
so that 



2 



(27) 



This probability is small, but if we repeat this process, 
run Grover for e~^^^ steps and then measure Pg, e"^/^ 
times, the probability that we will get at least one mea- 
surement result of if the function is e-far from linear 
will be of order one. In this case we make of order e~2/3 
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function calls. So, the total number of function calls is 
of order for the first part of the algorithm, and 

of order e~2/3 ^j^g second part (using the worst case 
number), for a total of order e~2/3 (2a,lls for the entire 
algorithm. 

Now let us do this in more detail. We shall assume for 
now that e < 1/8, as we have done so far, but we will find, 
in the course of our analysis, that this is not sufficient, 
and that a smaller range will be required. Going back 
to Eq. (gH), and using the fact that for O<0<7r/2, if 
fci > sin0 > fc2, then (7r/2)fci > 9 > k2, and assuming 
that e < 1/8, we find that Tr^/2e^/^ > 69 > {5/2)e^/^. 
This follows from 

-fci = 7rei/3(l -2e)(2- £2/3)1/2 <^72ei/3 



k, = 4Vi(l-6)l/2(l_,2/3)> 5 1/2^ 



(28) 



where the numbers in the expressions at the right were 
found by making use of the condition e < 1/8. We are 
now going to run Grover's algorithm for n steps, where 



(2n+ l)\/2ei/3 = 1, 



(29) 



so that n is of order e^^^^. Now, 2n + 1 must be an 
odd integer, and the above equation will, in general, not 
give us this result. So, we choose n so that 2n + 1 is 
the closest odd integer to l/{y/2e^^^). If 156* is at the top 
of its allowed range, then this will result in q{a, n) of 
order 1, and when we do our measurement we will find 
that the function was not linear. Now we have to see 
what happens if 69 is at the bottom of its allowed range. 
This should be the worst case, since n has been tuned 
for the top of the allowed range. Using the fact that for 
< (j) < 7r/2. we have that (f> > s'mcj) > (2/7r)(/), we find 
that 

1 I 

-(/)2 < 1 - COS0 = / d(j)' siii(j)' < -<?!)2. (30) 

I" Jo 2 

This implies that 

— [{2n + l)69f < q{a,n) < -[{2n + l)69]'\ (31) 

277 4 

If we take n directly from Eq. (P^ . ignoring for the 
moment that 2?! + 1 must be an odd integer, this would 
give us that 



1 /25 
2^ 



.1/3 



(32) 



where we have set 69 = {5/2)e^^^. This inequality, in 
fact, gives us the dominant behavior as e — > 0. However, 
we do need to take into account the fact that 2n + 1 must 
be an odd integer. This implies that {^/2e^^^)^^ — 1 < 
2n + 1 < (%/2ei/3)~i + 1, so that 



J_ ( ^ ,1/6 ^,1 

27r \2V2 



< - 



e ' — -e 
1 / 5 



<q{a,n) 



4 \2V2 



gi/e + ^gi/2 



(33) 



Thus, we see that g(a, n) is of order e^^^ with corrections 
of order 6^/3^ Now, in order for the e^^^ behavior to be 
dominant, we need e to be sufficiently small so that the 
ratio of the corrections, of order e2/3, to e^^^ be small, 
i.e. ei/3 < 1. If we now choose this ratio to be less than 
1/10, this implies that e < IG"^. 

We shall henceforth assume that e < 10~'^. This allows 
us to sharpen our bounds for 69. We first note that in 
this case, from the upper bound in Eq. (|25p . sm69 < 
2^(0.1) < 1/2, which implies that 69 < 7r/6. Now, 
for < ^ < 7r/6 we have that if ki > sin 9 > ^2, then 
(7r/3)fci > 9 > k2- This now gives us that 



27rV2 



>69> (3.996)ei/2, 



(34) 



a tighter bound than before. We now choose 2n + 1 to be 
the closest odd integer to [3/(2-v/2)]e~i/3, which means 
that if 69 is a the top of its range, q{n, a) will be close to 
one, and if the function is e-far from linear, this will be de- 
tected (by obtaining the measurement result when Pg is 
measured) after a small number of runs of the amplitude 
amplification algorithm. Let us now see what happens 
in the worst case for this choice of n, i.e. when 69 is at 
the bottom of its range. Setting a = [3(3.996)]/[2v/2], 
wc have that 

_L[«ei/6 „ 4ei/2]2 < ^(^^„) < h^^i/e ^ 4gi/2]2^ (35) 
2n 4 

The terms proportional to ^/e are the corrections due to 
the fact that {2n + 1) is an odd integer, and it can be 
seen that the ratio of A^/e to the dominant ae^/^ term 
is less than 1/10 for e = 10^"^ and decreases as e^/^ as 
e ^ 0. 

From the inequality, we see that q{a,n) e^/^. This 
probability is small, but if we repeat this procedure, run 
Grover for n steps and measure, r times, the probability 
that we never get when we measure Pg r times is 



[l-q{a,n)r < 

< exp 



1 _ ^^2^1/3 

27r 



1 

2^' 



(36) 



where we have ignored the 4ei/2 corrections. This can be 
made small if we choose r of order e~^^^. In particular, 
if 



27r 1 /Q , 
r > ^£-1/3 ln3, 
a'' 



(37) 



then the probability of never getting when we measure 
Pg is less than 1/3. 

Summarizing, we found that if / is e-far from linear, 
and |a| < ao, we will find that it is not linear with a prob- 
ability of order one by running Bernstein- Vazirani order 
e~2/3 -times. In the case that ao < a < 1 — 2e, assum- 
ing we get the same linear function every time we run 
Bernstein- Vazirani, then by running Grover order e~i/3 
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steps order e~i/3 times, for a total of order e"^/^ function 
calls, we will with a probability or order one detect the 
fact that it is not linear. In both cases the total number 
of function calls is of order e~^/^. 



IV. TESTING PERMUTATION INVARIANCE 

We now want to present a variant of the algorithm 
in the previous section that can test whether a Boolean 
function is invariant under permutations of its argu- 
ments, or is e-far from having this property. As was noted 
in the Introduction, a function that is invariant under all 
permutations of its arguments is called symmetric. An- 
other way of phrasing this is that we arc testing whether 
a function depends only on the Hamming weight of its ar- 
guments or is e-far from having this property. The Ham- 
ming weight of the sequence x = X1X2 ■ ■ - Xn is just the 
number of ones in the sequence, so that if f{xi ,X2, ■ ■ - Xn) 
depends only on the Hamming weight of its arguments, 
its value is determined only by how many of the Xj, for 
1 ^ J ^ 'T- are equal to one. 

There is a classical algorithm to test whether a Boolean 
function is symmetric or e-far from being symmetric . 
Again, it should be emphasized that this is a promise 
problem, the function is guaranteed to be one or the 
other. The procedure is to randomly choose an n-bit 
input, cc, that is not either all zeroes or all ones and eval- 
uate f{x). One then chooses an input y ^ x that has the 
same Hamming weight as x. Next, one checks and sees 
whether f{x) = /(y), and, if so, outputs "yes," otherwise 
one outputs "no." This procedure is repeated a number 
of times proportional to e~^, and if one obtains "yes" ev- 
ery time, the function is declared to be symmetric. If a 
"no" is obtained at any step the function is declared to 
be not symmetric. A symmetric function will always be 
accepted as symmetric by this algorithm, and a function 
that is e-far from being symmetric will be rejected with 
high probability. 

Now let us go to our quantum algorithm. Here the pro- 
cedure is different than in the classical case. We note that 
if a Boolean function is symmetric, then the correspond- 
ing vector, must lie in the completely symmetric 
subspace of %. Let us call this subspace S and the pro- 
jection operator onto it P5. Therefore, wc would like to 
test whether a function is invariant under permutations 
of its arguments by testing whether the corresponding 
vector \vf) is in S. In order to do so, we do the follow- 
ing: 

• Measure Ps order t~'^/^ times. If any of our mea- 
surements yield 0, we say the function is e-far from 
symmetric, and stop. If we do not obtain for 
any of our measurements results, we proceed to the 
next step. 

• Run amplitude amplification to amplify any com- 
ponent of \vj) that is orthogonal to S. We run 
amplitude amplification for order e~^/'^ steps, and 



measure Ps- Repeat this procedure order e~^/^ 
times. If we obtain as a measurement result for 
any of the measurements, we say the function is 
e-far from symmetric. 

• If the function has not been declared e-far from 
symmetric by cither of the previous steps, we de- 
clare the function symmetric. 

Note that a symmetric function will always be declared 
symmetric by this algorithm. 

In order to show how the algorithm works when the 
function is e-far from symmetric, we first need to deter- 
mine how large a component orthogonal to S the vector 
\vf) will have if / is e-far from being symmetric. We be- 
gin by expressing the vector \vf) as \vf) — \vfs) + 
where \vfs) = Ps|w/), and = (/ — Ps)\vf). We 

next define the vector \um), for m = 0, 1, . . .n, which is 
the superposition, with equal coefficients, of all vectors 
in the computational basis with m ones, e.g. 

|uo> = I00...0) 

\ui) = ^(|100...0)-H|010...0)-f ... 



I00...01)). 



We then have that 



(38) 



(39) 



m=0 



Now suppose that for the sequences with Hamming 
weight m, f{x) = 1 for Z„j of them and f{x) = for 
the remaining sequences. This implies that 
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(40) 



so that 

hfs 



1 / 



N \m 



2L 



(41) 

Next, it is relatively simple to construct the symmetric 
function that is closest to /, which we shall call g. If x 
has Hamming weight m, we set g{x) = if 



^™ - 2 V m 



and g{x) = 1 otherwise. This implies that 

1 " 
N ^ 



m— 



2L 



(42) 



(43) 



and, if / is e-far from being symmetric, we have that 
(w/|wg) < 1 — 2e. Therefore, making use of the fact that 
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< 1, 



(44) 
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wc have that 



We can now calculate G"|w/). Setting 



n 

^ N 



m=0 





-1 
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< 1 - 2e. 



(45) 



This gives us that |jw/s|P < 1 — 2e so that > 
2e. Therefore, if / is e-far from being symmetric, \vf) 
has a component of norm greater than or equal to y/2e 
orthogonal to S. 

Now let us look at our algorithm in more detail. We 
first measure Ps m times. If the result of any of our mea- 
surements is 0, we reject, and say that / is not symmetric. 
We will again break up our analysis into two parts. Let 
fJ- = lk/s|| and /io = 1 — e^^^, then we will consider the 
two cases, fi < ^0 and Mo < M < (1 - 2e)i/2. The second 
case will give us a nonzero range for ^ if e < 1/8, which 
we will assume to be the case (in fact, we shall assume 
that e < 10~^ as in the previous section). Now, if ^ < /ip, 
the probability that / passes this part of the test is Pm, 
where 



(46) 



If we choose m > In 3/(2e^/'^), then this probability will 
be less than 1/3. This part of the algorithm requires of 
the order of e"^/'^ oracle calls. 

Now let us look at the case when fio < < {1 — 
2e)^/^. If the function has passed the first part of the 
test, we proceed to the second part, which makes use of 
the Grover algorithm. The Grover operator in this case 
is 



G={I-2\vf){vf\){I-2Ps) 



(47) 



and it requires two applications of the oracle to imple- 
ment. We want to analyze what happens when we apply 
this operator to and in order to do so we define the 
unit vectors 



1 



1^2) 



\\vfs\ 

1 

hf±\\ 



(48) 



The operator G maps the two-dimensional space spanned 
by \ui) and \u2) into itself, and in the \u2)} basis, 

it can be represented as the 2x2 matrix 



G = 



2fi^ - 1 2m(1 - m')'/' 
-2m(1-m')'/' V-l 



(49) 



where we have set fj, = ||f/s|| < (1 — 2e)^/^. The eigen- 
values of this matrix are 

A± = 2^*2 - 1 ± 2i^i{l - fi^y/^, (50) 

with the corresponding eigenvectors given by 



(51) 



cose* = 2^2-1, sine = 2n{i- 



(52) 



which implies that for e <C 1 that we also have < <C 1 , 
we find that 

G"\vf) [^cosn6i+ (1 -^2)^/2 sin n6l]|ui) 

-^[-/isinn6i+ (1 -^2)1/2 cosn6i]|u2).(53) 

If we now measure Pg in this state, the probability that 
we obtain one, p{n, ^), is given by 



pin,fj.) 



cos 



(54) 



and the probability that we obtain 0, q{n,fi), which 
would show that the function is not symmetric, is 

q{7i, m) = 1 - p{n, ^) = 1 (1 - cos[(2n - 1)6]) . (55) 

We now need to get an estimate of 9. As in the previous 
section, we shall assume that e < lO^'^. Note that for 
(1/^2) < M < 1, which will be true if e^/^ < 1 _ 2"!/^ 
the function 2n{l — [i^Y^'^ is monotonically decreasing. 
In this case, we have that 

2^2(1 - e2/3)gi/3 > sin6i > 2(1 - 2<ifl'^^/2t. (56) 

This implies, using the same inequality as in the last 
section (for e < lO^'' wc do have that B < 7r/6), that 



27r\/2 



(1 - e2/3),i/3 > > 2V2(1 - 2e)i/2^, (57) 



which, for e < 10 can be simplified to 
^£1/=^ > 9 > 2x/2(0.998)ei 



/2 



(58) 



Next, we apply G n times where we now choose n so 
that 2n - 1 is the closest odd integer to [3/{2V2)]e~^/^, 
and measure Pg. We repeat this procedure I times, where 
I is of order e~^/'^. If 9 is near the top of its range, the 
probability that we will obtain when we measure Ps 
is then of order one, so that our function will be shown 
not to be symmetric with high probability after a small 
number of runs. Now let us see what happens if 9 is at 
the bottom of its range, the worst case. We first note 
that, making use of Eq. ([50)) . we have 

^[(2n- 1)0]2 < g(n,M) < \[{2n-l)9r. (59) 

Putting in the value of 9 at the bottom of its range and 
the value of n given above gives us 

^(/?el/6_2V2.V2)2 < < 1^(^,1/6 + 2^/2.1/2)2^ 

(60) 
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where /? = 3(0.998) and the order e-'^/^ terms result from 
the fact that 2n — 1 must be an odd integer. These are 
less than 1/10 of the dominant j3e^/^ contribution when 
e = 10"'^ and decrease as e^^'^ as e goes to zero. We shall 
neglect them for the rest of the calcination. Now the 
probability that we will get 1 each time we measure Ps 
is 



[l-g(n,/i)]'< 1 



1 

2^ 



^2^1/3 



< exp 



.1/3 



(61) 

Therefore, if we choose / > 27rln3/(/?^e^'^), this proba- 
bility can be made less than 1/3. The total number of 
oracle calls in the second part of the algorithm, that is, 
the part using the Grover algorithm, is of order e~^/^, so 
that the entire algorithm uses order oracle calls to 

determine whether a function is symmetric, or whether 
it is e-far from symmetric, with a probability of error of 
less than 1/3. 



tion is linear or e-far from linear, and if it is linear it 
tells you which linear function it is. The second tells you 
whether a Boolean function is symmetric or e-far from 
being symmetric. Both algorithms use of the order of 
g-2/3 Qi-acle calls, independent of the number of input 
variables to the Boolean function. 

It will be interesting to see whether quantum algo- 
rithms can be found that test for other properties of 
Boolean functions. The Bernstein- Vazirani algorithm 
and amplitude amplification give us a powerful tools, 
which are not available in the classical case. It remains 
to be seen exactly how useful they can be. 
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